Online Access Free FCSS_SOC_AN-7.4 Exam Questions

What should be a priority when configuring playbook tasks to ensure effective SOC automation?

• A.Limiting tasks to non-critical alerts
• B.Ensuring tasks are scheduled during office hours only
• C.Making tasks visible to external stakeholders
• D.Aligning tasks with the specific stages of incident response

Which statement describes automation stitch integration between FortiGate and FortiAnalyzer?

• A.A security profile on FortiGate triggers a violation and FortiGate sends a webhook call to FortiAnalyzer.
• B.An event handler on FortiAnalyzer executes an automation stitch when an event is created.
• C.An automation stitch is configured on FortiAnalyzer and mapped to FortiGate using the FortiOS connector.
• D.An event handler on FortiAnalyzer is configured to send a notification to FortiGate to trigger an automation stitch.

When configuring a FortiAnalyzer to act as a collector device, which two steps must you perform? (Choose two.)

• A.Configure Fabric authorization on the connecting interface.
• B.Enable log compression.
• C.Configure log forwarding to a FortiAnalyzer in analyzer mode.
• D.Configure the data policy to focus on archiving.

Refer to the exhibits.

You configured a spearphishing event handler and the associated rule. However. FortiAnalyzer did not generate an event.
When you check the FortiAnalyzer log viewer, you confirm that FortiSandbox forwarded the appropriate logs, as shown in the raw log exhibit.
What configuration must you change on FortiAnalyzer in order for FortiAnalyzer to generate an event?

• A.In the Log Type field, change the selection to AntiVirus Log(malware).
• B.Change trigger condition by selecting. Within a group, the log field Malware Kame (mname> has 2 or more unique values.
• C.In the Log Filter by Text field, type the value: .5 ub t ype ma Iwa re..
• D.Configure a FortiSandbox data selector and add it tothe event handler.

In a FortiAnalyzer deployment, how does the configuration of analyzers affect the overall system performance?

• A.By influencing the speed and accuracy of log analysis
• B.By setting the network timezone settings
• C.By determining the user access levels
• D.By dictating the graphical user interface design